Unable to disable WebSecurity (or set any web preferences) #413

New Issue

claunia · 2026-01-29T16:38:58Z

claunia commented

2026-01-29 16:38:58 +00:00

Originally created by @ddaspit on GitHub (Nov 29, 2019).

Originally assigned to: @GregorBiswanger on GitHub.

Version: 5.30.1

Target: Windows

When you create a browser window with WebSecurity set to false, it doesn't work. This seems to occur, because in browserWindows.ts, the createBrowserWindow handler only performs a shallow merge when merging the options parameter in order to set nodeIntegration to true. This results in the entire webPreferences object being overwritten.

Steps to Reproduce:
This can be reproduced using the Electron.NET music player sample app.

Start the music player app.
Play a music file.
Nothing happens. An error appears in the console.

Originally created by @ddaspit on GitHub (Nov 29, 2019). Originally assigned to: @GregorBiswanger on GitHub.    * **Version**: 5.30.1   * **Target**: Windows   When you create a browser window with `WebSecurity` set to `false`, it doesn't work. This seems to occur, because in `browserWindows.ts`, the `createBrowserWindow` handler only performs a shallow merge when merging the `options` parameter in order to set `nodeIntegration` to `true`. This results in the entire `webPreferences` object being overwritten. Steps to Reproduce: This can be reproduced using the [Electron.NET music player sample app](https://github.com/ElectronNET/electron.net-musicplayer-sample). 1. Start the music player app. 2. Play a music file. 3. Nothing happens. An error appears in the console.

claunia added the bug label 2026-01-29 16:38:58 +00:00

claunia closed this issue

2026-01-29 16:38:58 +00:00

claunia commented

2026-01-29 16:38:59 +00:00

@GregorBiswanger commented on GitHub (Dec 3, 2019):

The music player app is still based on an old Electron.NET version. I have to update this somehow. I tried a new example with the current Electron.NET 7.30.2 version and it worked without problems. I have access to files and can play them.

I used the same code snippets from:
http://www.cross-platform-blog.com/electron.net/electron.net-musicplayer-app-with-asp.net-core/

@GregorBiswanger commented on GitHub (Dec 3, 2019): The music player app is still based on an old Electron.NET version. I have to update this somehow. I tried a new example with the current Electron.NET 7.30.2 version and it worked without problems. I have access to files and can play them. I used the same code snippets from: http://www.cross-platform-blog.com/electron.net/electron.net-musicplayer-app-with-asp.net-core/

claunia commented

2026-01-29 16:38:59 +00:00

@ddaspit commented on GitHub (Dec 4, 2019):

I forked the music player sample app and updated it to 7.30.2. The master branch demonstrates the issue. When I click the play button, it does not play and I receive the following error in the console:

(index):1 Not allowed to load local resource: file:///C:/Users/user/Music/music.mp3
(index):1 Uncaught (in promise) DOMException: Failed to load because no supported source was found.

When I paste the file URL directly into Chrome, it plays correctly.

@ddaspit commented on GitHub (Dec 4, 2019): I forked the [music player sample app](https://github.com/ddaspit/electron.net-musicplayer-sample) and updated it to 7.30.2. The master branch demonstrates the issue. When I click the play button, it does not play and I receive the following error in the console: ``` (index):1 Not allowed to load local resource: file:///C:/Users/user/Music/music.mp3 (index):1 Uncaught (in promise) DOMException: Failed to load because no supported source was found. ``` When I paste the file URL directly into Chrome, it plays correctly.

claunia commented

2026-01-29 16:39:00 +00:00

@jlcool commented on GitHub (Feb 4, 2020):

Is there any progress on this issue

@jlcool commented on GitHub (Feb 4, 2020): Is there any progress on this issue

claunia commented

2026-01-29 16:39:01 +00:00

@duncanawoods commented on GitHub (Feb 6, 2020):

This is also a problem for me. I've just had to rewrite a bunch of things to serve up local files via the http server as a work-around which shouldn't be necessary.

Possibly related to this?

https://github.com/electron/electron/issues/19846

@duncanawoods commented on GitHub (Feb 6, 2020): This is also a problem for me. I've just had to rewrite a bunch of things to serve up local files via the http server as a work-around which shouldn't be necessary. Possibly related to this? https://github.com/electron/electron/issues/19846

claunia commented

2026-01-29 16:39:01 +00:00

@syedadeel2 commented on GitHub (Mar 2, 2020):

That is correct!! if I set the nodeIntegration = false its works

WebPreferences = new WebPreferences { WebSecurity = false, AllowRunningInsecureContent = true, ExperimentalCanvasFeatures=true, ScrollBounce=true, NodeIntegration = false }

@syedadeel2 commented on GitHub (Mar 2, 2020): That is correct!! if I set the nodeIntegration = false its works ` WebPreferences = new WebPreferences { WebSecurity = false, AllowRunningInsecureContent = true, ExperimentalCanvasFeatures=true, ScrollBounce=true, NodeIntegration = false }`

claunia commented

2026-01-29 16:39:02 +00:00

@GregorBiswanger commented on GitHub (May 10, 2020):

Works with the new Electron.NET 8.31.1.

@GregorBiswanger commented on GitHub (May 10, 2020): Works with the new Electron.NET 8.31.1.

claunia referenced this issue

2026-01-29 16:57:57 +00:00

[PR #413] [MERGED] Implementation for electronjs cookie handling #1162

claunia referenced this issue

2026-01-29 16:57:59 +00:00

[PR #413] Implementation for electronjs cookie handling #1167

Sign in to join this conversation.